Known vulnerabilities in ArubaOS (AOS) - page 9

Software: ArubaOS (AOS)
Software CPE: cpe:2.3:o:aruba_networks:arubaos:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 174
Public exploits: 6
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ArubaOS (AOS) ArubaOS (AOS) is affected by 174 known vulnerabilities: 52 high, 27 medium, 95 low Critical High Medium Low

Vulnerabilities (174)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU8916 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 Low
No
No
- 24.10.2017 SB2017101114
#VU8915 - Memory corruption
CVE-2017-9003
CWE-119 Low
No
No
- 24.10.2017 SB2017101114
#VU8914 - Improper Access Control
CVE-2017-9000
CWE-284 Low
No
No
- 24.10.2017 SB2017101114
#VU8847 - Key Management Errors
CVE-2017-13088
CWE-320 High
No
No
- 17.10.2017 SB2017101702
SB2017101704
SB2017101707
and 25 more
#VU8846 - Key Management Errors
CVE-2017-13087
CWE-320 High
No
No
- 17.10.2017 SB2017101702
SB2017101704
SB2017101707
and 26 more
#VU8845 - Key Management Errors
CVE-2017-13086
CWE-320 High
No
No
- 17.10.2017 SB2017101702
SB2017101704
SB2017101707
and 21 more
#VU8844 - Key Management Errors
CVE-2017-13084
CWE-320 High
No
No
- 17.10.2017 SB2017101704
SB2017101707
SB2017101905
and 2 more
#VU8842 - Key Management Errors
CVE-2017-13082
CWE-320 High
No
No
- 17.10.2017 SB2017101702
SB2017101707
SB2017101801
and 24 more
#VU8841 - Key Management Errors
CVE-2017-13081
CWE-320 High
No
No
- 17.10.2017 SB2017101702
SB2017101704
SB2017101706
and 30 more
#VU8840 - Key Management Errors
CVE-2017-13080
CWE-320 Medium
No
No
- 17.10.2017 SB2017101702
SB2017101703
SB2017101704
and 78 more
#VU8839 - Key Management Errors
CVE-2017-13079
CWE-320 High
No
No
- 17.10.2017 SB2017101702
SB2017101704
SB2017101706
and 27 more
#VU40865 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2015-1388
CWE-78 High
No
No
- 24.03.2015 SB2015032403
#VU41234 - Improper input validation
CVE-2014-7299
CWE-20 Medium
No
No
- 08.10.2014 SB2014100809
#VU42939 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-2290
CWE-79 Low
No
No
- 29.03.2013 SB2013032903


Showing elements 161 - 180 out of 174